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1. Introduction 

This paper is under construction. At the current stage, it only aims to present some 
essential ideas and theorems. We intend to extend this preliminary work to a full size paper 
in the near future. 



ABSTRACT. We present a new approach to credal nets, which are graphical models that 
generalise Bayesian nets to imprecise probability. Instead of applying the commonly used 
notion of strong independence, we replace it by the weaker notion of epistemic irrelevance. 
We show how assessments of epistemic irrelevance allow us to construct a global model 
out of given local uncertainty models and mention some useful properties. The main results 
and proofs are presented using the language of sets of desirable gambles, which provides a 
very general and expressive way of representing imprecise probability models. 
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"^h ; 2. Sets of desirable gambles 

Q . Consider a variable X taking values in some non-empty and finite set X. Knowledge 

about the possible values this variable may assume can be modelled in various ways: prob- 
ability mass functions, credal sets and coherent lower previsions are only a few of the many 
■ options. We choose te use a different approach, being a set of desirable gambles. We will 

^sD . model a subject's beliefs regarding the value of a variable X by means of his behaviour: 

which gambles (or bets) on the unknown value of X would our subject be inclined to parti- 
cipate in? 

Although they are not as well known as other (imprecise) probability models, sets of 
desirable gambles have a series of advantages. To begin with, sets of desirable gambles are 
more expressive then both credal sets and lower previsions. For example, sets of desirable 
gambles are easily able to model such things as conditioning on events with probability 
zero, which is something other imprecise probability models cannot do. Secondly, sets of 
desirable gambles have the advantage of being operational, meaning that there is a practical 
way of constructing a model that represents the subject's beliefs. In the case of sets of 
desirable gambles this can be done by offering the subject certain gambles and asking him 
whether or not he wants to participate. And finally, it tends to be much easier to construct 
proofs in the language of coherent sets of desirable gambles then it is to do so in other 
languages. We will give a brief survey of the basics of sets of desirable gambles and refer 
to Refs. [1, 2, 3] for more details and further discussion. 

2.1. Desirable gambles. A gamble / is a real-valued map on S£ which is interpreted as 
an uncertain reward. If the value of the variable X turns out to be x, the (possibly negative) 
reward is f(x). A non-zero gamble is called desirable if we accept the transaction in which 
(i) the actual value x of the variable is determined, and (ii) we receive the reward f(x). 
The zero gamble is not considered to be desirable, mainly because we want desirability to 
represent a strict preference to the zero gamble. 

We will model a subject's beliefs regarding the possible values <5Tthat a variable X can 
assume by means of a set @ of desirable gambles, which will be a subset of the set §f of 
all gambles on X. For any two gambles / and g in we say that / > g if f(x) > g(x) 

for all x in i£Tand/ > giff>g and / j^g. We use J#(^") > o to denote the set of all gambles 
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/ G for wich / > and ^(JT)< to denote the set of all gambles / G <S{S£) for 

which / < 0. As a special kind of gambles we consider the indicator functions. For every 
event A C 3£, the gamble 1a is called the indicator function of A. It is equal to 1 if the event 
occurs (the variable X assumes a value in A) and zero otherwise. 

2.2. Coherence. In order to represent a rational subject's beliefs about the values a vari- 
able can assume, a set ^ G ^($T) of desirable gambles should satisfy some rationality 
requirements. If these requirements are met, we call the set 9 coherent. 

For all /, fa, fa G ^{SC) and all real X > 0: 
Dl. if/<0then/G' 9 
D2. if/>0then/G^ 

D3. if / G 9 then Xf e9 [scaling] 
D4. if fa , fa G 9 then fa + fa G 9 [combination] 
Requirements D3 and D4 make 9 a convex cone: posi(f^) = 9, where we have used the 
positive hull operator posi which generates the set of finite strictly positive linear combin- 
ations of elements of its argument set: 



U=i > 

Here Wq is the set of all strictly positive real numbers, and No the set of all natural numbers 
(positive integers). 

2.3. Natural extension. In practice, a set of desirable gambles will usually be elicited by 
presenting an expert a number of gambles and asking him wether or not he finds them 
desirable. This results in a (finite) assessment of desirable gambles srf C Sf (j?T) and the 
question raises whether this can be extended to a coherent set. It is shown in Ref. [5] that 
if the assessment srf can be extended to a coherent set of desirable gambles, the smallest 
(most conservative) such coherent set is given by := posi(.e/ USf(<3T)>o) and we 
then call ${.e/) the natural extension of srf '. 

2.4. Maximal sets of desirable gambles. A coherent set 9 of desirable gambles on JTis 
called maximal if it is not strictly included in any other coherent set of desirable gambles 
on X. In other words, if adding any gamble / to 9 makes sure we can no longer extend the 
set 9U {/} to a set that is still coherent. We will denote maximal sets of desirable gambles 
as ^# instead of using the general notation 9. 

These maximal sets of desirable gambles have a number of useful properties. For ex- 
ample, a coherent set 9 of desirable gambles on !% is allways the intersection of all the 
maximal coherent sets ^ of desirable gambles on JTthat include 9\ see Ref. [5]. In other 
words, / G 9 if and only if / G for every ./# D 9. As a consequence, if a gamble 
/ G is not an element of 9, there is at least one maximal set M D 9 for which 

/ ^ ./#. Another useful property that holds for every maximal set is that for all gambles 
/ 7^ in Sf ( JT), either / or — / is an element of see Ref. [2]. 



3.1. Directed acyclic graphs. A directed acyclic graph (DAG) is a graphical model that 
is well known for its use in bayesian networks. It consists of a finite set of nodes (vertices), 
which are joint together into a network by a set of directed edges, each edge connecting 
one node with another. Since this directed graph is assumed to be acyclic, it is not possible 
to follow a sequence of edges from node to node and end up back at the same node you 
started from. 

We will call G the set of nodes s associated with a given DAG. For two nodes s and t, if 
there is a directed edge from s to t , we say that s is a parent of t and t is a child of s. Note 
that a single node can have multiple parents and multiple children. For any node s, its set 
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of parents is denoted by P(s) and its set of children by C(s). If a node s has no parents, we 
use the convention m(s) = and we call it a root node. The set of all root nodes is denoted 
as G D := {s £ G : P(s) = 0}. If C(s) = 0, then we call s a leaf, or terminal node. We denote 
by G° := {s £ G : C(s) ^ 0} the set of all non-terminal nodes. 

For nodes s and t, we write s C f if s precedes t, i.e., if there is a directed segment 
(sequence of directed edges) in the graph from s to t. If s C ; and $ / we say that s C f. 
For any node 5, we denote its set of descendants by := {f £ G : s C f } and its set of 
non-parent non-descendants is given by AT(s') := G\ (P(s) U {s} Ufl(i)). 

3.2. Variables and gambles on them. With each node s of the tree, there is associated a 
variable X s assuming values in a non-empty finite set X s . We denote by Sf( JT S ) the set of 
all gambles on !% s . We extend this notation to more complicated situations as follows. If 
S is any subset of G, then we denote by Xs the tuple of variables whose components are 
the X s for all s £ S. This new joint variable assumes values in the finite set 2£$ '■— x seS<%s 
and the corresponding set of gambles is denoted by When S = 0, we let ^ be a 
singleton. The corresponding variable X@ can then only assume this single value, so there 
is no uncertainty about it. ^{3^) can then be identified with the set R of real numbers. 
Generic elements of 2£ s are denoted by x s or z s and similarly for x s and zs in 5Es- Also, if 
we mention a tuple zs, then for any t £ S, the corresponding element in the tuple will be 
denoted by zt- We assume all variables in the network to be logically independent, meaning 
that the variable X s may assume all values in 2£$, for all C S C G. 

We will frequently use the simplifying device of identifying a gamble f s on X s with its 
cylindrical extension to S£\j, where S £U C G. This is the gamble fy on 3C\j defined by 
fu{ x u) '■— fs( x s) for a H x u £ $>u- To give an example, if Jff C ^(J^;), this trick allows us 
to consider C\ ( £(&s) as the set of those gambles in J(f that depend only on the variable 
Xs- As another example, this device allows us to identify the gambles I^,} and \ Xs }x &a\s' 
and therefore also the events {x$} and {x s } x S£ G \ S . More generally, for any event A C 3£$, 
we can identify the gambles Ia and Iax jr G , s , and therefore also the events A and A x -S^c\S- 

3.3. Modelling our beliefs about the network. Throughout the paper, we consider sets of 
desirable gambles as models for a subject's beliefs about the values that certain variables 
in the network may assume. One of the main contributions of this paper, further on in 
Section 4, will be to show how to construct a joint model for our network, being a coherent 
set QIq of desirable gambles on &q. 

From such a joint model, one can derive both conditional and marginal models. Let us 
start by explaining how to condition the global model S> G . Consider a subset / of G and 
assume we want to update the model 2) G with the information that Xi = xi. This leads to 
the following updated set of desirable gambles: 

®g\*i ■= {/ G n^G\l) ■ !{*,}/ G ^g}, 

which represents our subject's beliefs about the value of the variable Xq\ { , conditional on 
the observation that Xj assumes the value xj. This definition is very intuitive, since \ x ,}f 
is the unique gamble that is called off (is equal to zero) if Xj ^ xi and equal to fifXj = xj. 
Notice that since I^j = 1, the special case of conditioning on the certain variable Xy does 
not yield any problems. As wanted, it amounts to not conditioning at all. 

Marginalisation is also very intuitive in the language of sets of desirable gambles. Sup- 
pose we want to derive a marginal model for our subject's beliefs about the variable Xo, 
where O is some subset of G. This can be done by using the set of desirable gambles that 
belong to 3> G but only depend on the variable X : 

marg (^ G ) := {/ £ <3{X ) :f£@ G }. 

Now let / and O be disjoint subsets of G and let xi be any element of By sequen- 
tially applying the process of conditioning and marginalisation we can obtain conditional 
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marginal models for our subject's beliefs about the value of the variable X Q , conditional on 
the observation that Xj assumes the value xf. 

mavg (® G \ Xl ) = {/ G <3{X ) ■ \ x ,}f G ^g}- (2) 

Since coherence is trivially preserved under both conditioning and marginalisation, we 
find that if the joint model 3>q is coherent, all the derived models will also be coherent. 

Conditional and/or marginal models do not necessarily have to be derived from a joint 
model, they can instead also be given as seperate models on their own. In that case we will 
generecally denote them as 2>o\xr The special case of an unconditional marginal model is 
sometimes denoted as @o but we will also use the general notation above by letting 7 = 
in the general notation above. 

3.4. Epistemic irrelevance. We now have the necessary tools to introduce one of the most 
important concepts for this paper, that of epistemic irrelevance. We describe the case of con- 
ditional irrelevance, as we will show that the unconditional version of epistemic irrelevance 
can easily be recovered as a special case. 

Consider three disjoint subsets C, /, and O of G. When a subject judges X] to be epi- 
stemically irrelevant to X conditional on Xq, he assumes that if he knows the value of X c , 
then learning in addition which value Xi assumes in ,% will not affect his beliefs about 
Xo- More formally, assume that a subject has for every xq G S^c a coherent conditional set 
of desirable gambles $>o\x c on If he assesses Xj to be epistemically irrelevant to Xo 
conditional on X c , this implies that he can infer from these models 3>o\x c ^ following 
additional conditional models @o\xcui on 2£q'- 

®o\x CUI = @o\x c for allx cu/ G JT CU/ . 

By now, it should be clear that it suffices for the unconditional case, in the discussion above, 
to let C — 0. This makes sure the variable X c has only one possible value, so conditioning 
on that variable amounts to not conditioning at all. 

3.5. Local uncertainty models. We now add local uncertainty models to each of the 
nodes s in our network. These local models are assumed to be given beforehand and will be 
used further on in Section 4 as basic building blocks to construct a joint model for a given 
network. 

If s is not a root node of the network, i.e. has a non-empty set of parents P(s), then we 
have a conditional local model for every instantiation of its parents. For each XptA G Spu, 
we have a conditional coherent set & s \ Xp{s) of desirable gambles on SC S . It represents our 
subject's beliefs about the variable X s conditional on the information that its parents X P ^ 
assume the value Xp/ S y 

If s is one of the root nodes, i.e. has no parents, then our subject's local beliefs about the 
variable X s are represented by an unconditional local model. It should be a coherent set of 
desirable gambles and will be denoted by 2> s . As was explained in Section 3.3, we can also 
use the common generic notation S3 s \x P ^ m this unconditional case, since for a root node 
s, its set of parents P(s) is equal to the empy set 0. 

3.6. The interpretation of the graphical model. In classical Bayesian nets, the graphical 
structure is taken to represent the following assessments: for any node s, conditional on its 
parent variables, the associated variable is independent of its non-parent non-descendant 
variables. 

When generalising this interpretation to imprecise graphical networks, the classical no- 
tion of independence gets replaced by a more general, imprecise notion of independence 
that is usually chosen to be strong independence. In this paper we will not do so, we choose 
to use the weaker, assymetric notion of epistemic irrelevance instead, which was introduced 
earlier on in Section 3.4. In the special case of precise uncertainty models, both epistemic 
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irrelevance and strong independence will reduce to the usual classical notion of independ- 
ence and the corresponding interpretations of the graphical network are equivalent with the 
one used in a classical Bayesian network. 

In the present context, we assume that the graphical structure of the network embodies 
the following conditional irrelevance assessments, turning the network into a credal net 
under epistemic irrelevance. Consider any node s in the network, its set of parents P(s) and 
its set of non-parent non-descendants N(s). Then conditional on its parent variables X P ^ s y 
the non-parent non-descendant variables X N ^ are assumed to be epistemically irrelevant 
to the variable X s associated with the node s. 

For a coherent set of desirable gambles S> G that describes our subject's global beliefs 
about all the variables in the network, this interpretation has the following consequences. 
It can easily be seen from Sections 3.3 and 3.4 that it implies for all s 6 G and all subsets / 
of N(s) that 

marg s (@ G \x P ( s)UI ) = marg s (@ G \x P ( s) ) for all x P{s)ul G 3Cp (s)UI . (3) 

4. Constructing the most conservative joint 

Let us now show how to construct a global model for the variables in the network, and 
argue that it is the most conservative coherent model that extends the local models and 
expresses all conditional irrelevancies encoded in the network. But before we do so, let us 
provide some motivation. Suppose we have a global set of desirable gambles @) G , how do 
we express that such a model is compatible with the assessments encoded in the network? 

4.1. Defining properties of the joint. We will require our joint model to satisfy the fol- 
lowing four properties. First of all, we require that our global model extends the local ones. 
This means that the local models derived from the global one should be equal to the given 
local models: 

Gl. For each node s in G, maig s (^ G \xp^) — S>s\x P(s) f° r a U x p(s) £ $>p(sy 

The second requirement is that our model reflects all epistemic irrelevancies encoded in the 
graphical structure of the network: 

G2. Q}q satisfies all equalities that are imposed by Eq. (3). In these equalities, the right 
hand side can be replaced by & s \x P{<) due to requirement Gl. 

The third requirement is that our model satisfies the rationality requirement of coherence: 

G3. @ G is coherent (satisfies requirements D1-D4). 

Since requirements G1-G3 do not uniquely determine a global model, there is also a final 
requirement, which guarantees that all inferences we make on the basis of our global mod- 
els are as conservative as possible, and are therefore based on no other considerations than 
what is encoded in the tree: 

G4. 2> G is the smallest set of desirable gambles on !% G satisfying requirements G1-G3: 
it is a subset of any other set that satisfies them. 

We will now show how to construct the unique global model Sl G that satisfies all off the 
four requirements G1-G4 that were given above. 

4.2. Constructing the joint. Let us start by looking at a single given marginal model 
^ s \ x p( S ) an< ^ mves tig ate some of its implications for the joint model @ G . Consider any node s 
in the network and fix values x P ^ for its parents. For the local model @ s j Xp ,y we now 
introduce a corresponding (non-coherent) set srf l V of desirable gambles on SC G : 

:= ih^um }f : XN ^ e x m > / e } • w 
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It shall become clear by the proposition below that such a set si l 7 indeed contains (some 

s l x P(s) 

of the) implications that follow from the local model S> s \x P{s) ■ Next, we bundle all these local 
implications: 

U (5) 

seG,x P{s) e2£p( s) 

This results in a set stf£ r of desirable gambles on that will become essential further 
on for our construction of the joint model 3>q. The importance of this set £/^ r is already 
manifested by the following proposition, which is proven in Appendix A (as are all other 
important results of this paper). 

Proposition 1. Consider any s EG andxp^ £ 3£p(s). Then the set s^ 1 /^. ( ^ will be a subset 

of any joint model 3Iq satisfying requirements Gl and G2. As a consequence, their union 
srf G rr will also be a subset of any joint model $Sq satisfying requirements Gl and G2 and 
thus a subset of the unique joint model that satisfies all four requirements G1-G4. 

We now propose the following expression for the joint model $)q, describing our subject's 
beliefs about the variables in the network and satisfying all four requirements G1-G4: 

^ G :=posi« r ). (6) 

Since our eventual joint model 2)q should be coherent (satisfy requirement G3), and thus in 
particular should be a convex cone (satisfy properties D3 and D4), we know that posi(^e) 
should be equal to 3>q. It is therefor very intuitive to consider the set given above, since 
posi(posi(£^)) = posi(f^) for any set of desirable gambles 2>. On the other hand, it is not 
obvious that this set is indeed the unique joint model 2>q satisfying all four requirements 
G1-G4. Therefore, the next part of this paper consists of three propositions that will lead to 
the main theorem, which states that the joint model @>g does satisfy all four requirements 
G1-G4. We start by showing that it contains all positive gambles. 

Proposition 2. Sf(<3%)>o is a subset of posi(£/^ r ). As a consequence, we have that 

posiKf) =posi(< T USf(jr G ) >0 ) =: #(<■'') 

This proposition serves as a first step towards the following coherence result, which proves 
that our joint model satisfies requirement G3. 

Proposition 3. posing™ - ) is a coherent set of desirable gambles on S£g- 

The proof is given in Appendix A, but it contains an interesting result that deserves to be 
pointed out. The crucial step of the proof hinges on the assumption that if the local models 
of our network were precise probability mass functions, we would be able to construct a 
joint probability mass function that satisfies all irrelevancies (in that case independecies) 
that are encoded in our network. Since the precise version of a credal tree under epistemic 
irrelevance is a classical Bayesian network, this assumption is indeed true. However, what 
is nice about this approach, is that it can easily be extended to credal networks with irrel- 
evance assumptions that differ from the ones we use, as long as the assumption above is 
satisfied. This enables us to use existing coherence results for precise networks to proof 
their counterparts for credal networks. 

We now turn to an important proposition that will be essential to prove that our joint 
model extends the local models and expresses all conditional irrelevancies encoded in the 
network (satisfies requirements Gl and G2). 

Proposition 4. Consider any s E G and any subset I of its non-parent non-descendants 
N(s). If we fix a value X/>( s )u/ G ^p( s )\jb then if holds for every f £ Sf ( J^) that 
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We now have all necessary tools to formulate our most important result. It is the main con- 
tribution of this paper and provides a justification for the joint model 3>g that was proposed 
byEq.(6). 

Theorem 5. Consider any credal network under epistemic irrelevance with given con- 
ditional marginal models @ s \ Xp( ,, then 2>q — posi(«e/ ( i' T ) is the unique set of desirable 
gambles on 2£q that satisfies all four requirements G1-G4. 

5. Conclusions 

This paper has presented a new approach to credal nets. We replaced the commonly 
used notion of strong independence with the weaker notion of epistemic irrelevance and 
expressed both our local models and the eventual joint model in the language of sets of 
desirable gambles. This has lead to an intuitive, easy expression for a joint model, that 
is proven to be the most conservative coherent model that extends the local models and 
expresses all conditional irrelevancies encoded in the network. 
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Appendix A. Proofs of important results 

In this Appendix, we give proofs for Propositions 1, 2, 3 and 4 and Theorem 5. 

Proof of Proposition 1. The second part of this proposition is trivial and we thus only need 
to prove the first part. To do so, consider any s e G and x P ^ UN ^ e 3^p( s )un{s)- As a con- 
sequence of requirements Gl and G2, we see that ma£g s (&G\xp{ s )VN(s)) should be equal 
to the given local model %\ Xp ^ ■ If we now apply Eq. (2), it follows immediately that 
%*p(j)uat(j) )f ls an e l ement °f ^G> thereby completing the proof. □ 

Proof of Proposition 2. The essential step is to see that for any x G e =^g, the indicator 
function I{ X(J } is an element of srf™ '. To prove this, pick an arbitrary leaf s E G. This is 
possible because a DAG with a finite amount of nodes always has at least one leaf. Since s 
is a leaf, it has no descendants and we therefore have that G = sUP(s) UJV(s). Due to the 
coherence of the local models, and in particular property D2, the indicator function I^j is 
an element of %> s \ Xp{s) ■ We can now apply Eqs. (4) and (5) to see that I {xa} = l{ XsUP(s)UN{s) } 
is an element of stf™ ' . 

Since every / > is a finite strictly positive linear combination of the indicator func- 
tions that were constructed above, it follows that posif^g™") does indeed contain all pos- 
itive gambles in ^(^g)>o- As a consequence, we have that posi( ! e/ G ' T ) = posi(,e^j 7 ') U 
^(«^g)>0 and because posi(posi(f^)) = posi(f^) for any set of desirable gambles Ql, we 
find that posif^g 7 ") = posi (posi( 1 e£g 7 ') U£f ( JTg)>o)- The right hand side of this equality 
is trivially equal to posi {s^q t U ^(^g)>o) —'■ ^(• 2 *g' t )> thereby completing the proof. □ 

Our proof of Proposition 3 uses the following convenient version of the separating hy- 
perplane theorem. It is proven in Ref. [4, Lemma 2] and repeated here to make the paper 
more self-contained. 
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Lemma 6. Consider any finite subset srf of Then ^ S'(s^) := posi(\s/ USf(^T)>o) 
if and only if there is some probability mass function p such that Y, x e x p (x) f(x) > for all 
f £ srf and p(x) > for all x £ SC. 

Proof of Proposition 3. Proving that posi(^j r ) is coherent, means showing that it satisfies 
the properties D1-D4. Property D2 is a direct consequence of Proposition 2 and the prop- 
erties D3 and D4 are trivial since posi(^ G rr ) is a convex cone due to the use of the posi 
operator. We thus only need to prove the first property, stating that any gamble / £ ^(Sf G ) 
for which / < can not be an element of posi(^j rr ). 

So consider any / £ posi(^/ G rr ) and assume ex absurdo that / < 0. We will show that this 
leads to a contradiction. Since / is an element of posi^^""), it follows from Eqs. (1), (4) 
and (5) that 

/= E E 12 ^{ x P( S )UN( S )}f s > x P(s)> x N( S )> ( 7 ) 

seG x P ^e^p( s ) %(j)6^Ar( s ) 

where every f s , Xp ^,x N ^ is an element of ^s\x P , s \ U {0} and at least one of them differs 
from zero. The only perhaps surprising fact about the equation above, is that it does not 
contain any (strictly positive) scaling factors A 4jXp(j) iX/f ^ . The reason why these factors can 
be omitted is that the local models S> s \ Xp , s) are coherent and thus invariant under strictly 
positive linear scaling. Therefore, scaling a gamble fs,x P ^,x N ^ £ ^s\x P ^ with a strictly 
positive factor k s ,x P(s) ,x N{s) will still yield a gamble in S> s \x P(s) ■ 

Next, for every seG and x P ^ £ SC P ^ we construct a finite subset of the local model 

^ f \x P(s) : = {fs,Xp( s ),*N(s) :X N(s) S & N (s) wd fs,x P(s) ,x N{s) ^0}. 

Due to the coherence of we have that £ ^ s { Xp{s) ) £ ^s\x P(s) ) = ®s\x P(s) 

and we can therefore apply Lemma 6. This gives us for every seG and x P ^ £ SC P ^ 
a mass function p s (-\x P ^) on S£ s with expectation operator E s (-\x P ^) on < £{3C S ) such that 
p s {x s \x P ( s ) ) > for all x s E ,% and E s (g \x P ^ ) > for each g £ ^ x ■ 

The trick is now to create a Bayesian network that has the conditional mass functions 
Ps{-\xp( s )) as i ts l° ca l models and has the same graphical structure as our credal net under 
epistemic irrelevance. If we let E G be the expectation operator for this Bayesian net, we 
find that 

e g (/) = 52 E E E ° (h x P( S) uN( S ) } A x p(s) , x n(s) ) 

= E E E Mhxp^^Ecifs > x P(s)> x N(s) 

seG x P ^e,f P ^ %(j)6^jv(j) 

= E E E PG{Xp(s)UN{s)) E G{fs,x P(s) ,x N(s) \x P ( s )), 

seG X p( s) eXp (s) %(j)6^at( s ) 

in which p G is the global mass function of the Bayesian net. Since all the local prob- 
abilities Ps{-\x P ! s \) are strictly positive, this is also true for the global ones and we find 
that Pg{ x p( s )un(s)) > 0- For the conditional expectations E G (f SjXp ^,x N ^\ x p(s)) there are 
two possibilities. Either f s , Xp(s) ,x N(s) = 0, in which case E G {f s ,x P(s) ,x m I */>(.<)) = 0, either 
fs,x P{s) ,x m e . in which case E G (f S}Xp(s) ,x N{s) | *p( s )) > 0. However, since at least 

one of the gambles fs,x P ^,x N ^ i n Eq. (7) has to differ from zero, it is not possible that 
< x p(s)' x n(s) I x P(s)) — ^ f° r a ^ gambles fs,x P ^,x N ^ an d we can conclude that E G (f) > 0. 
If we now apply our assumption ex absurdo that / < and thus E G (f) < 0, this leads to a 
contradiction and completes the proof. □ 
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Proof of Proposition 4. The reverse implication is trivial due to the way posi(.2? G "') is 
constructed; see Eqs. (1), (4) and (5). It therefore suffices to prove the direct implica- 
tion. Consider any seG, any subset / of its non-parent non-descendants N(s) and fix a 
value Xp( s )u/ G 3£p( s )yji- We set out to proof for every / G S^(^) that / ^ %\x P ( s) implies 
I fewu/} /£posi(<-'-). 

The case / = is trivial because I{ Jp - )u7 }/ is then equal to zero, which can not be an 

element of posing' ) due to its coherence; see Proposition 3. If / ^ 0, we start by applying 
some of the properties of maximal coherent sets of desirable gambles that were introduced 
in Section 2.4. Due to the first property, we can infer from / ^ ^s\x P , s \ that there is at least 
one maximal set of desirable gambles ^*^ Xp } ^ ^s\ Xp{s) f° r which / ^ -^s\ Xp( y ^ ue t0 
the second property and the fact that / ^ 0, this in turn implies that — / G ^s\ Xp{) - 

We now denote by stf G rr * the set that is obtained by Eq. (5) if we replace the local model 
^s\x P{s) by the specific maximal superset ^*j x that was introduced above. It should be 

clear that g/i rr * D s^^ r . Next, since — f G , it follows from the construction of 

srf G rr * that I{jt PWu/ }(-/) € ^G r * ^ posi(^ G r ''*). The proof can now be completed if we 
realise that \ Xp ^ UI }f £ posi(^Q T *) because this would contradict with its coherence and 
notice that it implies that \ Xp{s)lJI }f i posi^™ - ) because srfg r * D srfg' '. □ 

Proof of Theorem 5. We start by proving that the joint model 2>q — pos^^a^.™") satisfies 
requirements Gl and G2. To do so, consider any seG,/C N(s) and x P ^ UI G 3£p( s )\ji an d 
an arbitrary gamble h G It can be seen from the following chain of equivalences 

that marg^ G Jx P(s)u/ ) = %\ Xp{s) . 

h G marg,(^ G J^ (s)u/ ) marg J (posi(^ G '''')Jxp ( , )u/ ) l{ Xp{s)IJI }h G posi(>/ G ' T ) 

The second equivalence is a direct application of Eq. 2 and the third one is due to Pro- 
position 4. Requirement Gl is now proven by letting I — Qi and requirement G2 is fulfilled 
because marg J (^Gjx/'(.i)u/) = %\x P ^ = mar g,s(^Gj*/>(s))- The next step is to show that the 
joint model <2> G = posing™") also satisfies requirements G3 and G4. 

Requirement G3 demands that 2>o = posi(j!/ G rr ) is coherent, but since this is proven in 
Proposition 3, the only thing that is left to prove is requirement G4. This final requirement 
demands that Q)q = posing™") is included in any set of desirable gambles satisfying the 
requirements G1-G3. This is easy to proof since we know from Proposition 1 that sd G r is 
a subset of any joint model satisfying all four requirements. It then follows from the coher- 
ence requirement G3 that 3l G — posi{.etf G rr ) is a subset of all joint models satisfying G1-G3 
and thus the unique smallest model that also satisfies requirement G4. □ 
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